Branch: refs/heads/maint-5.34 Home: https://github.com/Perl/perl5 Commit: 63f36a9334f30cb27d641731521f07564eaa391d https://github.com/Perl/perl5/commit/63f36a9334f30cb27d641731521f07564eaa391d Author: Ricardo Signes <rjbs@semiotic.systems> Date: 2022-02-26 (Sat, 26 Feb 2022)
Changed paths: M cpan/Encode/Encode.pm Log Message: ----------- Encode.pm: apply a local patch for CVE-2021-36770 I expect Encode to see a new release today. Without this fix, Encode::ConfigLocal can be loaded from a path relative to the current directory, because the || operator will evaluate @INC in scalar context, putting an integer as the only value in @INC. (cherry picked from commit c1a937fef07c061600a0078f4cb53fe9c2136bb9) Commit: 932f6a09ff08934d7eb7c230427d4633dd6d6621 https://github.com/Perl/perl5/commit/932f6a09ff08934d7eb7c230427d4633dd6d6621 Author: Hugo van der Sanden <h...@crypt.org> Date: 2022-02-26 (Sat, 26 Feb 2022) Changed paths: M locale.c Log Message: ----------- gh17824: zero curlocales[] Static analysis tools such as Coverity and clang report that we can otherwise end up reading uninitialized data, and inspection agrees. (cherry picked from commit 8a2e41ffbc376a86586e2b42daa43293299622c5) Commit: db48c3db85182b05e557fbbe6491e297665f3bdf https://github.com/Perl/perl5/commit/db48c3db85182b05e557fbbe6491e297665f3bdf Author: Hugo van der Sanden <h...@crypt.org> Date: 2022-02-26 (Sat, 26 Feb 2022) Changed paths: M regcomp.c Log Message: ----------- avoid overflow on delta in study_chunk delta and pos_delta may hold OPTIMIZE_INFTY to represent infinity. (cherry picked from commit e096e509321e540009a195ee8530c7dd07c62125) Commit: 7a52f426ed718c218479642f3effffd2f7a76035 https://github.com/Perl/perl5/commit/7a52f426ed718c218479642f3effffd2f7a76035 Author: Hugo van der Sanden <h...@crypt.org> Date: 2022-02-26 (Sat, 26 Feb 2022) Changed paths: M regcomp.c Log Message: ----------- data->pos_delta should stick at infinity The expression we're about to add to data->pos_delta in this part of study_chunk() can be both positive or negative; however while we apply an overflow check to avoid exceeding OPTIMIZE_INFTY, we were happily subtracting from it when the expression was negative, making it no longer infinite. (cherry picked from commit 8227b2b69230eaeea8f88d757b20021608518279) Commit: 43cbd598f60a85afcfc3de71e89e8a48330158f5 https://github.com/Perl/perl5/commit/43cbd598f60a85afcfc3de71e89e8a48330158f5 Author: Tony Cook <t...@develop-help.com> Date: 2022-02-26 (Sat, 26 Feb 2022) Changed paths: M sv.c M t/lib/warnings/sv Log Message: ----------- Don't try to Sv[PI]V() on an undef index SV in find_uninit_var() When trying to evaluate: $x{$y} or $x[$y] where both the index and the hash or array entry was undefined, when trying to report the entry as uninitialised, find_uninit_var() would try to get the string or numeric value of the index, recursively trying to produce a warning. This would end up overflowing the stack, producing a segmentation fault. Fixes #19147. (cherry picked from commit 23cca2d1f4544cb47f1124d98c308ce1f31f09a6) Commit: 656575c0e8a592751ea5bb18ad5760647af7eb4b https://github.com/Perl/perl5/commit/656575c0e8a592751ea5bb18ad5760647af7eb4b Author: Yves Orton <demer...@gmail.com> Date: 2022-02-26 (Sat, 26 Feb 2022) Changed paths: M regcomp.c Log Message: ----------- Fixup Issue #19350 - Assert error under: use re Debug=>"ALL" In 7c932d07cab18751bfc7515b4320436273a459e2 karl changed the regex parser to not do two passes always, and instead do one if it could. However in some edge cases it still must do a second past and some of the info needed for the Debug => "All" would not be available during the first pass. This was compounded by S_add_data() validly returning a 0 index for data that was stored in the data array, which meant that there was no way to tell the difference between "we dont have the data to call S_add_data() at all" and "we called S_add_data() and it returned 0", this in turn would cause the dumping logic to try to access data that was not there, and misinterpret it as a valid SV, with ensure assert fails or worse segfaults. This patch changes S_add_data() so it always returns a non-zero return, so that the regex debug logic can tell that it shouldnt do a lookup into the data array. This means create a new "what" type of "%", which is used SOLELY to populate the ->data[0] and ->what[0] with a dummy entry. With this done we can add guard statements to places that lookup things in the data array, if the index is 0 it can not be valid. (cherry picked from commit a963d6d5acabdd8c78afec507b56f890de6d346a) Commit: f5d636819508aaa8aca5bf524608482989d72318 https://github.com/Perl/perl5/commit/f5d636819508aaa8aca5bf524608482989d72318 Author: Yves Orton <demer...@gmail.com> Date: 2022-02-26 (Sat, 26 Feb 2022) Changed paths: M t/re/pat_advanced.t Log Message: ----------- Test for Issue #19250, assert fail with Debug=>ALL (cherry picked from commit 33fc73772ea3d0f5c08e3c0702c5df8dcb47ef15) Commit: b7a355bb618f078df8e25e2ec1ee225cc3a947ee https://github.com/Perl/perl5/commit/b7a355bb618f078df8e25e2ec1ee225cc3a947ee Author: Atsushi SUGAWARA <peanutsjam...@gmail.com> Date: 2022-02-26 (Sat, 26 Feb 2022) Changed paths: M lib/perl5db.pl Log Message: ----------- lib/perl5db.pl: cmd_l() no longer exists. Subroutine cmd_l() no longer exists. Now we should call cmd_l_main(). (cherry picked from commit fe991866a0206a96b2ae0b9e875b80609ab3b919) Commit: 5d3459078b3d598d5062bc0dbcc7f77d0009c18f https://github.com/Perl/perl5/commit/5d3459078b3d598d5062bc0dbcc7f77d0009c18f Author: Atsushi SUGAWARA <peanutsjam...@gmail.com> Date: 2022-02-26 (Sat, 26 Feb 2022) Changed paths: M lib/perl5db.pl Log Message: ----------- fix comment. (cherry picked from commit f4918ae72c941f3f53469101d22200cb6dc6903c) Commit: 1fb4de909b741f564fb9985015da8903a31cf366 https://github.com/Perl/perl5/commit/1fb4de909b741f564fb9985015da8903a31cf366 Author: Steve Hay <steve.m....@googlemail.com> Date: 2022-02-26 (Sat, 26 Feb 2022) Changed paths: M lib/perl5db.pl Log Message: ----------- Bump VERSION for previous two commits Commit: a23c14938114a96cca01c5c43d275fecd670f64f https://github.com/Perl/perl5/commit/a23c14938114a96cca01c5c43d275fecd670f64f Author: Dan Book <gri...@grinnz.com> Date: 2022-02-26 (Sat, 26 Feb 2022) Changed paths: M pod/perlcommunity.pod Log Message: ----------- perlcommunity - freenode chat is moving to libera (cherry picked from commit 1b4abd7a1176bbccd4448de637474be7e72f8a57) Compare: https://github.com/Perl/perl5/compare/79a7b254d85a...a23c14938114